Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137372e302f32342d3234203d3e20313734.roa
File:                     3139392e34382e3137372e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          P4XzwegTv5PGvoF6KxT4SSOGSQPr4Y0NnPX4h1FZvBk=
Subject key identifier:   1E:EF:8C:6D:64:0F:0E:D0:2F:15:01:5C:D5:CF:65:D3:7B:45:F7:71
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       1C83ACBAED281C0492DC8E68E0DF6D684444C28B
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137372e302f32342d3234203d3e20313734.roa
Signing time:             Fri 15 Sep 2023 14:41:58 +0000
ROA not before:           Fri 15 Sep 2023 14:36:58 +0000
ROA not after:            Fri 13 Sep 2024 14:41:58 +0000
asID:                     174
IP address blocks:        199.48.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:83:ac:ba:ed:28:1c:04:92:dc:8e:68:e0:df:6d:68:44:44:c2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Sep 15 14:36:58 2023 GMT
            Not After : Sep 13 14:41:58 2024 GMT
        Subject: CN=1EEF8C6D640F0ED02F15015CD5CF65D37B45F771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:40:06:83:8c:64:f9:da:7d:71:c3:77:7c:
                    08:1e:f3:5c:be:27:81:14:e8:c0:23:26:24:73:57:
                    95:ac:ec:bb:86:ed:58:cd:d2:8f:f6:32:6f:43:36:
                    fa:29:8e:81:b6:44:00:3e:ae:13:bf:e8:f8:50:18:
                    ab:df:97:02:fd:93:c6:58:a7:b9:cc:e6:d4:81:e8:
                    05:5a:ec:f8:71:2b:d2:88:7d:db:cd:76:8f:b0:d6:
                    dc:0b:d0:d3:6e:7e:59:0a:fd:38:44:49:46:4d:12:
                    47:d2:9e:ba:38:71:1d:73:4a:a2:b4:7c:5c:77:a9:
                    b9:3b:8d:7c:b4:ee:7a:de:de:96:2d:e7:32:db:01:
                    93:3c:04:8d:72:78:c2:89:9c:10:c9:0e:5c:bd:cc:
                    dd:09:61:f3:c3:56:f3:ce:40:d2:32:e9:7b:67:1f:
                    65:4c:57:11:0e:a8:f9:65:db:39:1f:7b:43:ca:fd:
                    73:91:39:ee:e7:70:da:11:57:a9:48:21:64:3e:1e:
                    62:7c:a6:ae:e3:99:94:32:38:f5:86:97:72:d4:43:
                    2b:8e:41:2c:86:a3:3b:71:71:9b:67:40:84:e6:3c:
                    59:7b:40:a4:58:86:37:97:b3:5b:0e:75:9e:74:1d:
                    6e:e3:02:a1:a1:ab:9d:b3:bf:6a:4f:df:38:5a:bf:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:8C:6D:64:0F:0E:D0:2F:15:01:5C:D5:CF:65:D3:7B:45:F7:71
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137372e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:3b:cf:04:cd:a3:f9:57:65:ed:8a:0f:8f:d8:b8:db:90:
         60:db:a1:6c:fd:70:1c:5c:d2:d3:90:33:e3:0b:d6:71:f6:56:
         80:1c:07:0f:52:bd:96:ed:9f:37:88:f4:84:8e:40:f2:59:1a:
         5c:12:48:73:0c:8f:14:f9:ec:0b:fe:46:d6:37:6c:fe:41:09:
         87:31:8b:37:7b:fa:fc:aa:07:ae:5c:49:cb:dd:09:57:c5:1d:
         90:e7:b7:00:79:e1:53:df:39:c2:bf:cd:ca:ee:27:a6:cd:ce:
         83:c2:3a:9a:8b:fa:26:89:93:76:42:dd:c7:09:59:22:c5:bc:
         89:14:e3:8a:c2:76:76:ee:92:6c:ff:b5:3f:3e:84:3d:ed:e4:
         5e:35:21:b9:66:73:8c:ac:96:fe:5d:0e:52:85:4b:f0:09:69:
         f1:03:27:cd:71:fb:4c:60:d7:84:55:a1:cd:3d:af:c9:2a:da:
         b4:f8:b5:4c:02:05:4b:af:d9:ff:28:f5:b1:dd:db:d4:97:51:
         81:4b:37:2d:78:14:85:f5:3e:34:7c:8c:08:b0:7a:06:80:06:
         ad:fa:d1:18:cd:32:9f:ba:cb:46:27:82:71:32:62:72:0e:a8:
         a2:ce:91:f2:40:75:eb:41:4f:91:35:ae:86:56:36:60:e4:ca:
         07:f3:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----